Display User's current password in user control panel.

[desizsports]

I need to display user's current password in their control panel. Is it possible ?

[snakes1100]

Thats a very BAD idea.

[desizsports]

Join Date: Dec 2001 :- I will have to trust you on this.

The thing is that I am working on making a link for the user that is something like :-

http://user@pass:ip.com

Is there any alternatives to do this other than user putting the information manually ?

[snakes1100]

vb uses md5 hash + salt

[Boofo]

It can be done but is not advisable.

[Marco van Herwaarden]

This can not be done without major concessions to security.

[phantom15]

I am also wanting to do this, I have sent a PM to Marco van Herwaarden for guidence

I am also trying to achieve that same thing as desizsports

[Marco van Herwaarden]

Viewing the current passwords of members is impossible as they are not available in plain text.

You could setup vB to also sent the unencrypted passwords, but sending unencrypted passwords over the internet, is a huge security vulnerability. Once the unencrypted passwords are sent to the server, you could catch the variable and store it in a new database column.

to enable sending unencrypted passwords, add the following line to your config.php:

PHP Code:

define('DISABLE_PASSWORD_CLEARING', true); 


[phantom15]

I dont quite understand, I just have to add that code and I will be able to view it on the server?

Soory for being an idiot

[Paul M]

Originally Posted by phantom15

I dont quite understand, I just have to add that code and I will be able to view it on the server?

No.

In simple terms - by default, when a user registers in vb an encrypted version of their password is sent to the server and stored in the database. You can enable vb to send the unencrypted version instead (which will happen for NEW registrations only). There is no way to ever view the passwords of existing users as they will already be encrypted.

To repeat earlier people - doing this is an incredibly stupid idea as its a major security risk.